FSSO workstation verify disable ?

[tedauction]

Hello, we use FSSO however have had problems with 'workstation verify' i.e. the FSSO collector agent has trouble polling a client workstation to establish if the user is still logged in or not.

I see in the Fortinet documentation that you can disable workstation verify. However my question is, if you disable workstation verify does not defeat the whole purpose of FSSO i.e. you would then potentially allow any local user on that workstation from being allowed access on the FSSO firewall policy ?